AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims 
in the application: 



Listing of Claims: 



1 1 • (Currently amended) A method for providing concurrenc/ control for a 

2 policy-based management system that controls resources in a distributed 

3 computing system, the method comprising: 

4 receiving a request to perform an operation on a locicable resource from a 

5 controller in the distributed computing system , wherein the lockable resource 

6 includes one of a device, an appliance, a system, and m application , wherein the 

7 lockable resource presents one or more independent/locks providing access to 

8 independent sub units of the re s ource and wherem the one or more independent 

9 locks allow multipl e controllers to lock indep e nd e nt sub units of th e lockabl e 

10 r e source independently; 

11 wherein the controller and a policy governing th e controller comprise a 
lockable resource, whereby a policy may /Control a lock on a second policy and the 
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second policy may control a lock on a lockable resourc e; 

wherein the controller sends the request in order to enforce a first policy 
for controlling resources in the distributed computing system; 

determining whether the Controller holds a lock on the lockable resource; 
allowing the controller to execute the operation on the lockable resource if 
the controller holds the lock on the lockable resource; 

allowing the controller to acquire the lock if the controller does not hold 
the lock on the lockable respurce; and 
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allowing the controller to execute the operation on the lockable/fesource if 
the controller acquires the lock. / 



1 2. (Original) The method of claim 1, wherein the first policy is configured 

2 to command resources in the distributed computing system taf perform actions so 

3 that the distributed computing system operates in accordance with a rule that is 

4 enforced by the first policy, wherein the rule governs behavior of resources within 

5 the distributed computing system. / 

1 3. (Original) The method of claim 1, further comprising throwing an 

2 exception if the controller does not hold the4ock on the lockable resource and if 

3 the controller does not acquire the lock. / 

1 4. (Original) The method of/claim 1 ? wherein the lock held on the lockable 

2 resource expires after a pre-specmed lease period, unless the lease is renewed 

3 within the pre-specified lease period. 

1 5. (Original) The method of claim 1, wherein the lockable resource 

2 includes a resource within the distributed computing system. 

1 6. (OriginalYThe method of claim 1, wherein the lockable resource 

2 includes a secondypolicy for controlling resources in the distributed computing 

3 system. / 

1 7. (Omginal) The method of claim 1, wherein the controller includes a 

2 client in the/distributed computing system. 
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8. (Original) The method of claim 1, wherein the controller includes the 
first policy for controlling resources in the distributed computing system. 



1 9. (Original) The method of claim 1, wherein the controller includes a 

2 higher-level policy for controlling resources in the distributedxomputing system, 

3 and wherein the lockable resource includes a lower-level policy for controlling 

4 resources in the distributed computing system. 



1 10. (Original) The method of claim 1, wherein allowing the controller to 

2 acquire the lock includes allowing the controller to acquire the lock from a 

3 resource that allocates locks to controllers. 



1 1 . (Cancelei 




1 12. (Currently amended) A computer-readable storage medium storing 

2 instructions that when executed by a computer cause the computer to perform a 

3 method for providing concurrei/cy control for a policy-based management system 

4 that controls resources in a distributed computing system, the method comprising 

5 receiving a request to perform an operation on a lockable resource from a 

6 controller in the distributed computing system , wherein the lockable resource 

7 includes one of a devic/, an appliance* a system, and an application , wherein the 

8 lockable resource pre/ent s one or more independent locks providing access to 

9 independent sub unfts of the resource and wherein the one or more independ e nt 

10 locks allow multiple controll e rs to lock independ e nt sub unit s of the lockabl e 

1 1 r e sourc e indep e nd e ntly ; 

12 wherein the controller sends the request in order to enforce a first policy 

13 for controlling resources in the distributed computing system; 

14 determining whether the controller holds a lock on the lockable resource; 
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15 allowing the controller to execute the operation on the lockable resource if 

16 the controller holds the lock on the lockable resource; ^ J 

17 allowing the controller to acquire the lock if the controller does not hold 

1 8 the lock on the lockable resource; and / 

19 allowing the controller to execute the operation on the lockable resource if 

20 the controller acquires the lock. / 

1 13. (Original) The computer-readable storage medium of claim 12, 

2 wherein the first policy is configured to command resources in the distributed 

3 computing system to perform actions so that the distributed computing system 

4 operates in accordance with a rule that is enforced byrhe first policy, wherein the 

5 rule governs behavior of resources within the distributed computing system. 

1 14. (Original) The computer-readable storage medium of claim 12, 

2 wherein the method further comprises throwing an exception if the controller does 

3 not hold the lock on the lockable resourceyand if the controller does not acquire 

4 the lock. / 

1 15. (Original) The computer^/eadable storage medium of claim 12, 

2 wherein locks held by the controller expire after a pre-specified lease period, 

3 unless the lease is renewed within the pre-specified lease period. 

1 16. (Currently amended) An apparatus that provides concurrency control 

2 within a policy-based management system that controls resources in a distributed 

3 computing system, the apparatus comprising: 

4 a receiving meonanism that receives a request to perform an operation on a 

5 lockable resource from a controller in the distributed computing system , wherein 

6 the lockable resource includes one of a device, an appliance, a system, and an 
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7 application , wher e in the lockabl e resource pr e s e nts one or more indep e ndent locks 

8 providing access to independent sub units of the resource and wherem the one or 

9 more independent locks allow multiple controllers to lock independent sub units 

10 of th e lockabl e r e sourc e ind e pend e ntly; 

1 1 wh e r e in th e controll e r and a policy governing the contr6ll e r comprise a 

12 lockable resource, whereby a policy may control a lock on aysecond policy and the 

13 second policy may control a lock on a lockable resource ; 

14 wherein the controller sends the request in order Yo enforce a first policy 

1 5 for controlling resources in the distributed computing /ystem; 

16 a determining mechanism that determines \^nether the controller holds a 

1 7 lock on the lockable resource; 

1 8 an execution mechanism that is configured to, 

1 9 allow the controller to Acquire the lock if the controller 

20 does not hold the lock on ther lockable resource, and to 

21 allow the controlle/ to execute the operation on the lockable 

22 resource if the controlle/holds the lock on the lockable resource. 

1 17. (Original) The apparatu/ of claim 16, wherein the first policy is 

2 configured to command resource/ in the distributed computing system to perform 

3 actions so that the distributed computing system operates in accordance with a 

4 rule that is enforced by the firist policy, wherein the rule governs behavior of 

5 resources within the distributed computing system. 

1 18. (Original) Thef apparatus of claim 16, wherein the execution 

2 mechanism is configured to throw an exception if the controller does not hold the 

3 lock on the lockable resource and if the controller does not acquire the lock. 
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1 19. (Original) The apparatus of claim 16, wherein the lofck on the lockable 

2 resource expires after a pre-specified lease period, unless the4ease is renewed 

3 within the pre-specified lease period. / 

1 20. (Original) The apparatus of claim 16, wherein the lockable resource 

2 includes a resource within the distributed computing system. 

1 21. (Original) The apparatus of claim/ 6, wherein the lockable resource 

2 includes a second policy for controlling resources in the distributed computing 

3 system. / 

1 22. (Original) The apparatus M claim 16, wherein the controller includes a 

1^ 2 client in the distributed computing/system. 

1 23. (Original) The apparatus of claim 16, wherein the controller includes 

2 the first policy for controlling resources in the distributed computing system. 

1 24. (Original) Thfe apparatus of claim 16, wherein the controller includes a 

2 higher-level policy fo/controlling resources in the distributed computing system, 

3 and wherein the loclcable resource includes a lower-level policy for controlling 

4 resources in the distributed computing system. 

1 25. (Original) The apparatus of claim 1 6, wherein the execution 

2 mechanisn/is configured to allow the controller to acquire the lock from a 

3 resourceahat allocates locks to controllers. 





1 27. (New) The method of claim 1, v/nerein the lockable resource presents 

2 one or more independent locks provicjirfg access to independent sub-units of the 

3 resource., 

1 28. (New) Th€^apparatus of claim 16, wherein the lockable resource 

2 presents one ofmore independent locks providing access to independent sub-units 

3 of the rejsource. 
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